j3d1/bearssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added flag to prohibit renegotiations.

Browse source
This commit is contained in:
Thomas Pornin 2016-11-20 18:50:37 +01:00
parent 3b044d4296
commit d16eee962a
10 changed files with 626 additions and 583 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/ssl/ssl_hs_client.t0
View file

@ -999,12 +999,9 @@ cc: do-ecdh ( echde prf_id -- ulen ) {
0 addr-application_data set8
read-HelloRequest
\ Reject renegotiations if the peer does not
\ support secure renegotiation. Theoretically
\ we could just ignore that, however if the
\ server sent an HelloRequest then it is
\ expecting a handshake and will wait for our
\ ClientHello.
addr-reneg get8 1 = if
\ support secure renegotiation, or if the
\ "no renegotiation" flag is set.
addr-reneg get8 1 = 1 flag? or if
flush-record
begin can-output? not while
wait-co drop